CmdID / az / az confcom

az confcom acifragmentgen

Create a Confidential Container Policy Fragment for ACI. Azure CLI extensions reference

27 options Its page in the Azure CLI extensions reference

Options

27 in the Azure CLI extensions reference

Show its 27 options

--algoAlgorithm used for signing the generated policy fragment.

--chainPath to .pem formatted certificate chain file to use for signing the generated policy fragment.

--debug-modeDebug mode will enable processes in a container group that are helpful for debugging

--disable-stdioDisabling container stdio will disable the ability to see the output of the container in the terminal for Confidential ACI

--enable-stdioEnable the standard io streams to leave the container

--feed, -fFeed to use for the generated policy fragment.

--fragment-path, -pPath to a signed policy fragment to be used with --generate-import to make import statements without having access to the fragment's OCI registry.

--fragments-json, -jPath to JSON file to write fragment import information.

--generate-import, -gGenerate an import statement for a policy fragment

--image-targetImage target where the generated policy fragment is attached

--imageImage to use for the generated policy fragment

--input, -iPath to a JSON file containing the configuration for the generated policy fragment

--key, -kPath to .pem formatted key file to use for signing the generated policy fragment.

--minimum-svnUsed with --generate-import to specify the minimum SVN for the import statement

--namespace, -nNamespace to use for the generated policy fragment

--no-printDo not print the generated policy fragment to stdout

--omit-idOmit the id field in the policy.

--out-signed-fragmentEmit only the signed fragment bytes

--output-filenameOutput filename for the generated policy fragment

--outrawOutput policy fragment in clear text compact JSON instead of default base64 format

--platformTarget platform for policy generation.

--prerelease-policy-apiGenerate a policy using the latest bundled prerelease policy API, framework version, and fragments.

--skip-win-ver-checkSkip the host Windows version check in dmverity-vhd when hashing Windows images.

--svnMinimum Allowed Software Version Number for the generated policy fragment.

--tarPath to either a tarball containing image layers or a JSON file containing paths to tarballs of image layers

--upload-fragment, -uUpload a policy fragment to a container registry

--with-containersContainer definitions to include in the policy